get:
    tags:
        - rbacusers
    description: 'Fetch a single user by its id, if visible for the current subject.'
    operationId: getUserById
    parameters:
        - $ref: './api-definition/auth.yaml#/components/parameters/currentUser'
        - $ref: './api-definition/auth.yaml#/components/parameters/assumedRoles'
        - name: userUuid
          in: path
          required: true
          schema:
              type: string
              format: uuid
    responses:
        "200":
            description: OK
            content:
                'application/json':
                    schema:
                        $ref: './api-definition/rbac-user-schemas.yaml#/components/schemas/RbacUser'

        "401":
            $ref: './api-definition/error-responses.yaml#/components/responses/Unauthorized'
        "403":
            $ref: './api-definition/error-responses.yaml#/components/responses/Forbidden'


delete:
    tags:
        - rbacusers
    operationId: deleteUserByUuid
    parameters:
        - $ref: './api-definition/auth.yaml#/components/parameters/currentUser'
        - $ref: './api-definition/auth.yaml#/components/parameters/assumedRoles'
        - name: userUuid
          in: path
          required: true
          schema:
              type: string
              format: uuid
          description: UUID of the user to delete.
    responses:
        "204":
            description: No Content
        "401":
            $ref: './api-definition/error-responses.yaml#/components/responses/Unauthorized'
        "403":
            $ref: './api-definition/error-responses.yaml#/components/responses/Forbidden'
        "404":
            $ref: './api-definition/error-responses.yaml#/components/responses/NotFound'